Reference no: EM131193073
Web Application Attack Scenario
Suppose that you are currently employed as an Information Security Manager for a medium-sized software development and outsourcing services company. The Software Development Director has asked you to provide a detailed presentation for her department regarding the most common Web application threats and the manner in which their products could compromise customer financial data. The products in question use Microsoft SQL Server databases and IIS Web servers. She has asked you to provide a report for her review before she schedules the presentation.
Write a two to four (2) page paper in which you:
Analyze the common threats to data systems such as Web applications and data servers. Next, speculate on the greatest area of vulnerability and potential for damage and / or data loss of such data systems (e.g., SQL injection, Web-based password cracking).
Devise one (1) attack scenario where a hacker could use the area of vulnerability that you chose in Question 1 in order to gain access to a network or sensitive data. Examine the primary ways in which the hacker could execute such an attack, and suggest the strategic manner in which a security professional could prevent the attack.
Explore the primary role that the human element could play in adding to the attack scenario devised in Question 2. Give your opinion on whether or not the human component is critical in protection from that type of attack.
Use at least three (3) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.
Your assignment must follow these formatting requirements:
Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; citations and references must follow APA or school-specific format. Check with your professor for any additional instructions.
Include a cover page containing the title of the assignment, your name, the professor's name, the course title, and the date. The cover page and the reference page are not included in the required assignment page length.
The specific course learning outcomes associated with this assignment are:
Describe security concerns, tools, and techniques associated with Web servers and Web applications.
Identify the means of hacking Web browsers.
Summarize the manner in which database servers and applications are compromised and examine the steps that can be taken to mitigate such risks (e.g., SQL injection).
Use technology and information resources to research issues in ethical hacking.
Write clearly and concisely about topics related to Perimeter Defense Techniques using proper writing mechanics and technical style conventions
|
Who want to remain anonymous are not identified
: If not, how might you ensure that such a group was protected if they had been included in your study? How will you ensure that those who want to remain anonymous are not identified?
|
|
How can you tell which beaker is which
: Three beakers contain clear, colorless liquids. One beaker contains pure water, another contains salt water, and another contains sugar water. How can you tell which beaker is which? (No tasting allowed!)
|
|
How many gold atoms would have to be lined up to span 1.0 mm
: If the atom is assumed to be a sphere, what is the volume in cm3 of a single Au atom?
|
|
Explain the role that psychology plays in the legal system
: Describe how mental illness is defined in the field of forensic psychology. Describe the role that psychology plays in the legal system.
|
|
Identify the means of hacking web browsers
: Identify the means of hacking Web browsers. Summarize the manner in which database servers and applications are compromised and examine the steps that can be taken to mitigate such risks (e.g., SQL injection).
|
|
What are the main ideas of the theory and therapy
: What are the main ideas of the theory/therapy? How is the therapy/theory used in counseling? What target population is the theory/therapy designed or used with currently.
|
|
Explain the health policy you are proposing and its purpose
: Your policy could include safety issues such as and hand hygiene or Medication Administration. Include the following in your letter: Explain the health policy you are proposing and its purpose. Explain why action is needed. Explain what course of act..
|
|
Global component of an organization
: In short essay, describe an example in which the global component of an organization's external environment has a large on the organization itself.
|
|
About different cultures in these regions
: Please take on the role of a different part of the world or major country in a region (United States, Europe, United Kingdom, Asia, China, Middle East, Egypt, etc.). Based on what you’ve learned in this class about different cultures in these regions..
|